$ rpki-client -vvvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa File: 323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa (raw, json) Hash identifier: 9l6Yxz4PTOAijUytpEk2MBsZbUsaJpg6O1ejvCytoC8= Subject key identifier: A5:E5:7C:EF:8F:4A:CD:49:D2:DA:F8:3C:92:7E:7A:29:82:C4:C5:DB Certificate issuer: /CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Certificate serial: 264E289F33843C749FE0DD40E2E7EB83E374B647 Authority key identifier: CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa Signing time: Sat 26 Sep 2026 14:34:19 +0000 ROA not before: Sat 26 Sep 2026 14:29:19 +0000 ROA not after: Sat 25 Sep 2027 14:34:19 +0000 asID: 263995 IP address blocks: 2804:2910:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 02:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4e:28:9f:33:84:3c:74:9f:e0:dd:40:e2:e7:eb:83:e3:74:b6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Validity Not Before: Sep 26 14:29:19 2026 GMT Not After : Sep 25 14:34:19 2027 GMT Subject: CN=A5E57CEF8F4ACD49D2DAF83C927E7A2982C4C5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bb:ae:f3:b5:d1:83:c8:ab:d2:5f:50:6d:d8: 51:da:d9:ac:fe:46:d9:7e:aa:55:50:88:0d:77:76: dc:00:52:d1:23:3f:ee:f1:07:e0:f1:2c:52:5b:32: cb:60:d8:54:4e:c9:79:ed:83:2d:03:11:a2:83:1e: 2a:b9:67:58:f5:09:f0:08:7f:7b:db:34:60:f4:22: b9:c0:38:5d:97:2a:2c:56:c8:bb:38:8f:be:30:c2: 1f:de:e8:c9:d4:9a:d4:a3:b6:d7:21:46:b0:53:fb: d1:c5:2b:3b:15:1c:28:ea:e4:32:b5:48:ec:4d:d4: 1c:01:60:d3:cc:4b:e3:4d:7b:f7:3b:33:9e:08:9b: e6:0a:39:24:89:b6:aa:12:f5:41:ad:ce:70:3b:72: 35:7b:f3:e9:c9:3a:8f:5b:35:dc:74:84:3e:4c:7e: 98:f8:42:67:43:6a:52:98:83:a7:0a:03:2b:78:5a: e9:d8:c4:1a:07:2d:06:81:97:66:eb:87:3a:dd:55: 56:45:64:20:55:a4:40:a4:87:06:ea:fc:6a:7a:8d: 5c:c0:b8:80:ef:36:25:2a:19:f8:07:60:d1:7a:ff: 2e:8c:5f:f7:e9:23:d1:f8:f1:64:23:2b:7b:71:eb: 51:29:ef:a2:22:d2:6c:5a:7d:05:6a:d7:20:78:67: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E5:7C:EF:8F:4A:CD:49:D2:DA:F8:3C:92:7E:7A:29:82:C4:C5:DB X509v3 Authority Key Identifier: keyid:CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2910:20::/44 Signature Algorithm: sha256WithRSAEncryption 9a:c7:e0:a7:a7:f2:87:79:2e:4d:f5:3c:de:a0:49:b2:3f:75: 07:93:bd:d1:f2:22:9d:66:01:49:c8:7c:6f:30:23:56:b7:dd: 1d:c0:7b:07:b2:65:c9:06:fa:e8:6d:a7:2f:5d:fa:ff:8f:87: b3:43:dc:ff:30:f1:e9:51:e3:6a:a0:4b:ca:51:dc:fa:14:cc: 63:d0:af:b2:63:f3:4a:7e:70:9b:80:e2:74:96:67:8d:ed:fd: 33:2b:df:2e:7c:0e:d9:fd:52:44:7f:04:ae:bc:2f:c5:43:8b: 40:dc:51:85:5d:98:e8:82:94:9f:96:be:d4:fa:78:57:49:aa: 85:9a:89:8d:1e:29:b2:cd:e9:51:be:a8:09:d9:48:7d:6d:e9: 46:28:ba:b1:29:66:f9:bd:25:52:96:04:6b:6f:be:9f:1c:0e: 19:14:69:bf:33:44:45:e5:39:0a:a4:90:99:eb:a9:0e:9e:99: 4f:3f:f7:b8:1a:67:45:e4:e2:fb:bf:d0:fc:54:7f:83:75:84: 27:a0:04:54:7c:b1:ed:ca:19:9a:28:02:bf:af:c5:75:ac:d2: 4b:a2:70:a6:1d:97:ab:9a:42:0c:28:b5:a9:46:7c:7e:4c:82: 47:84:71:ae:44:bb:0c:ac:b3:37:d3:75:40:e6:d9:f9:2e:21: db:51:f1:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUJk4onzOEPHSf4N1A4ufrg+N0tkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMEZCNkNBOUU2NkNDNzNDRDdDM0FDRjlGMDFFNDA1 NUZDMzY3RTAeFw0yNjA5MjYxNDI5MTlaFw0yNzA5MjUxNDM0MTlaMDMxMTAvBgNV BAMTKEE1RTU3Q0VGOEY0QUNENDlEMkRBRjgzQzkyN0U3QTI5ODJDNEM1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQu67ztdGDyKvSX1Bt2FHa2az+ Rtl+qlVQiA13dtwAUtEjP+7xB+DxLFJbMstg2FROyXntgy0DEaKDHiq5Z1j1CfAI f3vbNGD0IrnAOF2XKixWyLs4j74wwh/e6MnUmtSjttchRrBT+9HFKzsVHCjq5DK1 SOxN1BwBYNPMS+NNe/c7M54Im+YKOSSJtqoS9UGtznA7cjV78+nJOo9bNdx0hD5M fpj4QmdDalKYg6cKAyt4WunYxBoHLQaBl2brhzrdVVZFZCBVpECkhwbq/Gp6jVzA uIDvNiUqGfgHYNF6/y6MX/fpI9H48WQjK3tx61Ep76Ii0mxafQVq1yB4Z1HpAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUpeV8749KzUnS2vg8kn56KYLExdswHwYDVR0j BBgwFoAUzTD7bKnmbMc818Os+fAeQFX8Nn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV SFMvMC9DRDMwRkI2Q0E5RTY2Q0M3M0NEN0MzQUNGOUYwMUU0MDU1RkMzNjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMzBGQjZDQTlFNjZDQzcz Q0Q3QzNBQ0Y5RjAxRTQwNTVGQzM2N0UuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv MzIzODMwMzQzYTMyMzkzMTMwM2EzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw MzIzNjMzMzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQpEAAgMA0GCSqGSIb3DQEBCwUAA4IB AQCax+Cnp/KHeS5N9TzeoEmyP3UHk73R8iKdZgFJyHxvMCNWt90dwHsHsmXJBvro bacvXfr/j4ezQ9z/MPHpUeNqoEvKUdz6FMxj0K+yY/NKfnCbgOJ0lmeN7f0zK98u fA7Z/VJEfwSuvC/FQ4tA3FGFXZjogpSflr7U+nhXSaqFmomNHimyzelRvqgJ2Uh9 belGKLqxKWb5vSVSlgRrb76fHA4ZFGm/M0RF5TkKpJCZ66kOnplPP/e4GmdF5OL7 v9D8VH+DdYQnoARUfLHtyhmaKAK/r8V1rNJLonCmHZermkIMKLWpRnx+TIJHhHGu RLsMrLM303VA5tn5LiHbUfFK -----END CERTIFICATE-----Generated at Wed Oct 28 20:29:24 2026 by rpki-client